CVE-2024-33007: Improper Neutralization of Input During Web Page Generation

PDFViewer is a control delivered as part of SAPUI5 product which shows the PDF content in an embedded mode by default. If a PDF document contains embedded JavaScript or any harmful client-side script, the PDFViewer will execute the JavaScript embedded in the PDF which can cause a potential securi...

CVE-2023-30743

Due to improper neutralization of input in SAPUI5 - versions SAPUI 750, SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, UI700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user’s interaction with the application. Further, in the absence of URL validation by th...

Design/Logic Flaw

Due to improper neutralization of input in SAPUI5 - versions SAPUI 750, SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, UI700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user’s interaction with the application. Further, in the absence of URL validation by th...

CVE-2023-30743 Improper Neutralization of Input in SAPUI5

Due to improper neutralization of input in SAPUI5 - versions SAPUI 750, SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, UI700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user’s interaction with the application. Further, in the absence of URL validation by th...

CVE-2023-30743

The CVE-2023-30743 entry affects SAPUI5: sap.m.FormattedText in SAPUI5 versions SAP_UI 750, 754, 755, 756, 757, UI_700 200 is vulnerable to injection of untrusted CSS due to improper input neutralization. This can block user interaction and, without URL validation, could enable a phishing-style r...

CVE-2023-30743 Improper Neutralization of Input in SAPUI5

Due to improper neutralization of input in SAPUI5 - versions SAPUI 750, SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, UI700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user’s interaction with the application. Further, in the absence of URL validation by th...

CVE-2023-30743: Improper Neutralization of Input During Web Page Generation

Due to improper neutralization of input in SAPUI5 - versions SAPUI 750, SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, UI700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user’s interaction with the application. Further, in the absence of URL validation by th...

Malicious code in custdev-sapui5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c8000aea0a385f4b0206f53bea1b711a3c8599155fe6434824e825dc184430a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in custdev-sapui5-infra-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e19031212e3c4af860f8d016c8df106f9c7f9f78fca4f991735c39b88398b4e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2280 Malicious code in custdev-sapui5-infra-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e19031212e3c4af860f8d016c8df106f9c7f9f78fca4f991735c39b88398b4e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2279 Malicious code in custdev-sapui5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c8000aea0a385f4b0206f53bea1b711a3c8599155fe6434824e825dc184430a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SAP SAPUI5 library cross-site scripting vulnerability

SAP SAPUI5 library is a JavaScript application framework from SAP, a German company. SAP SAPUI5 library is vulnerable to cross-site scripting, which can be exploited by unauthenticated attackers to execute JavaScript code on the client side...

CVE-2022-28770

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

CVE-2022-28770

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

CVE-2022-28770

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

Input validation

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

CVE-2022-28770

CVE-2022-28770 affects SAPUI5 library (vbm) versions 750, 753, 754, 755, 75. Due to insufficient input validation, an unauthenticated attacker can inject a script into the URL and execute code, leading to a limited impact on confidentiality and integrity (view/modify information). No explicit rem...

CVE-2022-28770

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

PT-2022-19220

Name of the Vulnerable Software and Affected Versions SAPUI5 libraryvbm versions 75 through 755 Description The issue is caused by insufficient input validation, allowing an unauthenticated attacker to inject a script into the URL and execute code. This can lead to a limited impact on the...

SAPUI5 library cross-site scripting vulnerabilities

SAP SAPUI5 library is a JavaScript application framework from SAP, a German company. SAP SAPUI5 library is vulnerable to cross-site scripting, which can be exploited by unauthenticated attackers to execute JavaScript code on the client side...